Motivation-Based Risk Analysis Process for IT Systems - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2014

Motivation-Based Risk Analysis Process for IT Systems

Résumé

Information security management is one of the most important issues to be resolved. The key element of this process is risk analysis. The standards are (ISO/IEC 27000, ISO/IEC 31000) based on the complex and time consuming process of defining vulnerabilities and threats for all organisation assets. In the article we present a new approach to analysing the risk of an attack on information systems. We focus on human factor - motivation, and show its relation to hacker profiles, as well as impacts. At the beginning we introduce a new model of motivation-based risk analysis. Then we describe case study illustrating our approach for a simple set of organisation processes.
Fichier principal
Vignette du fichier
978-3-642-55032-4_45_Chapter.pdf (284.24 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01397337 , version 1 (15-11-2016)

Licence

Paternité

Identifiants

Citer

Agata Niescieruk, Bogdan Ksiezopolski. Motivation-Based Risk Analysis Process for IT Systems. 2nd Information and Communication Technology - EurAsia Conference (ICT-EurAsia), Apr 2014, Bali, Indonesia. pp.446-455, ⟨10.1007/978-3-642-55032-4_45⟩. ⟨hal-01397337⟩
38 Consultations
88 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More